openstack
/
neutron
Code Issues Proposed changes
neutron/neutron
History
sridhargaddam 1776511429 Add IPv6 Address Resolution protection 
Similar to IPv4 arp protection support, this patch adds the necessary OVS
rules to prevent ports attached to agent from sending any icmpv6 neighbor
advertisement messages that contain an IPv6 address not belonging to the port.

For details please refer to "Figure 3. Attack against IPv6 Address Resolution"
http://www.cisco.com/web/about/security/intelligence/ipv6_first_hop.html

DocImpact
SecurityImpact

Closes-Bug: #1491690
Change-Id: I1f8311f1b9ae1be02afde3e9078e49c6da373a88
 		2015-09-15 12:24:10 +00:00
..
agent Merge "Delete gateway conntrack state when remove external gateway" 2015-09-14 05:05:20 +00:00
api Fix TypeError caused by delete_agent_gateway_port() 2015-09-14 17:09:19 -04:00
callbacks Merge "Add support for PluginWorker and Process creation notification" 2015-09-04 05:02:52 +00:00
cmd Add IPv6 Address Resolution protection 2015-09-15 12:24:10 +00:00
common Add IPv6 Address Resolution protection 2015-09-15 12:24:10 +00:00
core_extensions Forbid attaching rules if policy isn't accessible 2015-08-12 09:52:33 +00:00
db Merge "Fix query in get_l3_agent_with_min_routers" 2015-09-14 21:59:13 +00:00
debug Deprecate external_network_bridge option in L3 agent 2015-09-01 20:41:54 -07:00
extensions Merge "Enable most unit tests for py34 job" 2015-09-04 20:55:18 +00:00
hacking Restructure agent code in preparation for decomp 2015-06-26 15:06:49 +00:00
ipam Merge "Fixed the typo in the doc string of the class SubnetPoolReader" 2015-09-01 07:08:07 +00:00
locale Imported Translations from Transifex 2015-08-21 06:08:23 +00:00
notifiers Remove hack for discovery novaclients extension 2015-09-09 14:35:26 +00:00
objects Add policy and policy rule belongs check 2015-08-28 15:29:52 +08:00
openstack Switch to the oslo_utils.fileutils 2015-07-15 08:09:26 +03:00
plugins Add IPv6 Address Resolution protection 2015-09-15 12:24:10 +00:00
quota Merge "docstring fix" 2015-09-14 18:36:55 +00:00
scheduler DVR: make sure snat portion is always scheduled when needed 2015-08-20 13:23:02 +03:00
server Add support for PluginWorker and Process creation notification 2015-09-03 06:40:50 +00:00
services Merge "Make sure service providers can be loaded correctly" 2015-09-04 10:31:23 +00:00
tests Add IPv6 Address Resolution protection 2015-09-15 12:24:10 +00:00
__init__.py Allow users to run 'tox -epy34' 2015-05-11 16:09:51 +02:00
auth.py Migrate to oslo.log 2015-03-12 11:22:56 +01:00
context.py Add DB support for resource usage tracking 2015-07-26 15:26:10 -07:00
i18n.py oslo: migrate to namespace-less import paths 2015-02-05 15:09:32 +01:00
manager.py Add support for PluginWorker and Process creation notification 2015-09-03 06:40:50 +00:00
neutron_plugin_base_v2.py Add support for PluginWorker and Process creation notification 2015-09-03 06:40:50 +00:00
policy.py Stop device_owner from being set to 'network:*' 2015-09-08 15:00:13 +00:00
service.py Add support for PluginWorker and Process creation notification 2015-09-03 06:40:50 +00:00
version.py
…
worker.py Add support for PluginWorker and Process creation notification 2015-09-03 06:40:50 +00:00
wsgi.py Add support for PluginWorker and Process creation notification 2015-09-03 06:40:50 +00:00